---
typeId: req
recordId: benac-auth-016
fields:
  title: Authentication interface
  statement: Benac implementations shall provide interfaces for local user
    authentication, local user re-authentication for sensitive actions,
    Station-to-Station authentication, signed challenge handling, agent session
    authentication, authentication/session expiry and revocation, authenticated
    approval records, host-mediated external service authentication,
    credential-use effect recording, and authentication-context inspection. The
    exact mechanism may differ by Host Platform, but the semantic records and
    fail-closed behavior shall be interoperable.
  rationale: Authentication mechanisms vary by host, but Benac records and failure
    semantics must remain portable.
  verification: Authentication interface conformance tests exercise local
    authentication, re-authentication, Station-to-Station signed challenge
    handling, agent sessions, expiry/revocation, approval records,
    credential-use effects, and fail-closed behavior.
  area: BENAC-AUTH
  sourceSections:
    - 11.7 Authentication interface
  order: 193.3
  testable: true
  status: draft
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
---
